[Snort-users] Problem with permissions when snort ran as user "snort"

Sp0ng3 B0b sp0ng3b0b at ...9090...
Fri Sep 9 07:10:02 EDT 2005


I'm running snort 2.4 on an OpenBSD 3.7 IDS.

Snort is started like so:

snort -c /etc/snort/snort.conf -i bridge0 -l
/var/log/snort -u snort -g snort -D

The user snort owns /var/log/snort.

Unfortunately, the logfiles permissions are wrong:

drwxr-xr-x  2 snort  snort    512 Sep  9 07:01 .
drwxr-xr-x  3 snort  snort    512 Aug  3 22:00 ..
-rw-------  1 root   snort   2256 Sep  9 07:07
snort.alert.1126274487
-rw-------  1 root   snort  39261 Sep  9 07:07
snort.log.1126274487

What am I missing here?








More information about the Snort-users mailing list